mathiasandClaude Opus 5.5 87fa28e2c8 fix(update,session): brain_update and session_log confine caller paths (#169) ...

Review round 1 on PR #170 found two more handlers with the #169 class of
bug (verified by execution):

- brain_update resolved its caller path with resolveWithin, a lexical
  containment check: any brain file could be superseded
  (classification.yaml, raw/, sessions/), and a final symlink was
  written through. UpdateNote now resolves like brain_edit
  (notes.Resolve, ScopeNotes: knowledge/ and wiki/ .md notes), and reads
  and rewrites through brainfs (ReadRegular, WriteRegular).
- session_log joined the caller's session_id onto the sessions dir and
  opened it O_CREATE|O_APPEND: an id with path segments created or
  appended a .jsonl file anywhere the pod could write. The id must now
  be a plain name (^[A-Za-z0-9_][A-Za-z0-9._-]{0,127}$, which every live
  session file matches), and the open adds O_NOFOLLOW|O_NONBLOCK. Read
  checks the id too.
- Tunnel tests: the .txt case now names an existing file (it failed on
  "missing" before), the symlink test adds an in-brain target, and the
  FIFO comment no longer claims the handle check is the only guard.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-04 22:38:08 +02:00

..

frontmatter_test.go

fix(api): frontmatter parser must not misparse indented list items as keys (#135)

2026-09-23 08:12:06 +00:00

frontmatter.go

fix(frontmatter): consolidate 3 independent fence-parsers into one (#139)

2026-09-23 13:07:32 +00:00

handler_test.go

fix(ingestion): authenticate the REST API; confine ingest paths to brain/raw/ (#149) (#152)

2026-10-03 14:38:07 +00:00

handler.go

fix(ingestion): brain/raw/ readers go through an os.Root; symlinks are inert (#153) (#156)

2026-10-03 15:30:49 +00:00

ingestpath_docmark_test.go

fix(ingestion): authenticate the REST API; confine ingest paths to brain/raw/ (#149) (#152)

2026-10-03 14:38:07 +00:00

ingestpath_root_test.go

fix(ingestion): authenticate the REST API; confine ingest paths to brain/raw/ (#149) (#152)

2026-10-03 14:38:07 +00:00

ingestpath_root.go

fix(ingestion): brain/raw/ readers go through an os.Root; symlinks are inert (#153) (#156)

2026-10-03 15:30:49 +00:00

passrate_test.go

feat(brain): /pass-rate aggregator and handler

2026-05-03 22:37:41 +02:00

passrate.go

feat(brain): /pass-rate aggregator and handler

2026-05-03 22:37:41 +02:00

promote_test.go

fix(watcher): never walk into raw/rejected/ — brain_reject (closes #81)

2026-09-23 06:06:35 +00:00

promote.go

fix(ingestion): brain/raw/ readers go through an os.Root; symlinks are inert (#153) (#156)

2026-10-03 15:30:49 +00:00

provenance_test.go

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

provenance.go

feat(brain): audit-log every tools/call; server-owned write provenance (#147)

2026-10-01 21:06:36 +00:00

raw_race_test.go

feat(ingestion): runtime symlink tripwire removes what it finds, 30s scans (#157) (#160)

2026-10-03 19:34:19 +00:00

raw_symlink_test.go

fix(ingestion): brain/raw/ readers go through an os.Root; symlinks are inert (#153) (#156)

2026-10-03 15:30:49 +00:00

rawroot.go

fix(ingestion): brain/raw/ readers go through an os.Root; symlinks are inert (#153) (#156)

2026-10-03 15:30:49 +00:00

readnote_root_test.go

fix(brain): context, brain_get and brain_read read through brainfs (#157, slice 2) (#165)

2026-10-04 05:59:55 +00:00

update_scope_test.go

fix(update,session): brain_update and session_log confine caller paths (#169)

2026-10-04 22:38:08 +02:00

update_test.go

fix(api): UpdateNote reserves updated_at/supersedes/supersede_reason from the caller's fragment (#137)

2026-09-23 08:18:30 +00:00

update.go

fix(update,session): brain_update and session_log confine caller paths (#169)

2026-10-04 22:38:08 +02:00